nginx vulnerabilities
USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. In addition, this update fixes CVE-2026-42533 for these releases. It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could possibly use this issue to crash nginx, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-42533) Original advisory details: It was discovered that nginx incorrectly handled certain configurations using the alias directive
Read at Ubuntu Security Notices
- Vendor
- Canonical, F5
- Product
- NGINX, Ubuntu
- EPSS
- 0.008 (p58)
- Exposure class
- Web platform, Operating system
Why it ranks 46 (High)
- Product class: web platform, operating system
- Widely deployed vendor product (Canonical)
- Covered by 4 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-42533 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-15176 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-93479 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-95101 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-97205 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.